cloud-iam-privesc

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is internally consistent, but its purpose is to help an AI agent perform cloud IAM privilege escalation using real credentials and cloud control-plane actions. Install provenance is mostly legitimate, and there is no clear credential exfiltration, but the offensive capability and potential for autonomous high-impact changes make this a high-risk security skill.

Confidence: 93%Severity: 86%
Audit Metadata
Analyzed At
Sep 20, 2026, 11:02 PM
Package URL
pkg:socket/skills-sh/noorqureshi%2Fsploitagent%2Fcloud-iam-privesc%2F@75d1b173fd3653cd197c896c5f821907aad08e52f73e34ed174006d5d5840846
Security Audit — socket — cloud-iam-privesc